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Reply to Office Action of January 23, 2009 

Amendment to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

Claim 1 (currently amended): A gateway network element that provides access to 
network elements that are not directly reachable, comprising: 

a processor that is directed by code; 

code that receives and sends packets over a first IP based interface to a first 
network; 

code that receives and sends packets over a second IP based interface to a second 
network, wherein IP addresses of network elements in the second network are not visible 
to network elements in the first network; 

code for categorizing the received packets based on the interface over which the 
packet was received, type of packet, and whether the destination address specifies the 
gateway network element; and 

code that selects and applies a set of filtering rules to the r e ceiv e d categorized 
packets based on a category of the received packet, wherein each set of said filtering 
rules differ from said other sets of filtering rules and comprises rules specifying which of 
said packets are accepted and which of said packets are rejected; 

wherein the first network is a Data Communications Network (DCN) and the 
second network is a Data Communication Channel (DCC) and the code that applies said 
filtering rules provides separation between the DCN network and the DCC network. 
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Claim 2 (original): The gateway network element of claim 1, further comprising 
code that sends packets over the first IP based interface only when the packets specify the 
gateway network element as the source. 

Claim 3 (currently amended): The gateway network element of claim 1, further 
comprising code that accepts all packets received over the first IP based interface in 
which tf the destination address specifies the gateway network element, a subnet 
broadcast address* or a multicast address and rejects all other packets . 

Claim 4 (original): The gateway network element of claim 1, further comprising 
code that implements a proxy server that provides forwarding between IP address of the 
first and second networks. 

Claim 5 (canceled). 
Claim 6 (canceled). 

Claim 7 (currently amended): A gateway network element that provides access to 
network elements that are not directly reachable, comprising: 

a processor that is directed by code; 

means for receiving and sending packets over a first IP based interface to a first 
network; 

means for receiving and sending packets over a second IP based interface to a 
second network, wherein IP addresses of network elements in the second network are not 
visible to network elements in the first network; 
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means for categorizing the received packets based on the interface over which the 
packet was received, type of packet, and whether the destination address specifies the 
gateway network element; and 

means for selecting and applying a set of filtering rules to the r e c e iv e d 
categorized packets based on a category of the received packet, wherein each set of said 
filtering rules differ from said other sets of filtering rules and comprises rules specifying 
which of said packets are accepted and which of said packets are rejected ; 

wherein the first network is a Data Communications Network (DCN) and the 
second network is a Data Communication Channel (DCC) and the code that applies said 
filtering rules provides separation between the DCN network and the DCC network. 

Claim 8 (currently amended): A method for providing access to network 
elements that are not directly reachable, comprising: 

receiving and sending packets over a first IP based interface to a first network; 

receiving and sending packets over a second IP based interface to a second 
network, wherein IP addresses of network elements in the second network are not visible 
to network elements in the first network; 

categorizing the received packets based on the interface over which the packet 
was received, type of packet, and whether the destination address specifies the gateway 
network element; and 

selecting and applying a set of filtering rules to the r e c e ived categorized packets 
based on a category of the received packet, wherein each set of said filtering rules differ 
from said other sets of filtering rules and comprises rules specifying which of said 
packets are accepted and which are rejected : 

wherein the first network is a Data Communications Network (DCN) and the 
second network is a Data Communication Channel (DCC) and applying said filtering 
rules provides separation between the DCN network and the DCC network. 
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Claim 9 (original): The method of claim 8, further comprising sending packets 
over the first IP based interface that specify the gateway network element as the source. 

Claim 10 (currently amended): The method of claim 8, further comprising 
accepting all packets received over the first IP based interface in which- if the destination 
address specifies the gateway network element, a subnet broadcast address^ or a multicast 
address and rejecting all other packets . 

Claim 1 1 (currently amended): The method of claim 8, further comprising 
accepting all packets received over the second IP based interface in which ai fthe 
destination address specifies the gateway network element, a network element in the 
second network or a multicast address and rejecting all other packets . 

Claim 12 (original): The method of claim 8, further comprising implementing a 
proxy server that provides forwarding between IP address of the first and second 
networks. 

Claim 13 (canceled). 

Claim 14 (canceled). 

Claim 15 (canceled). 

Claim 16 (canceled). 

Claim 1 7 (canceled). 
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Claim 18 (currently amended): The gateway network element of claim 1 further 
comprising: 

code that accepts packets received over the first IP based interface comprising if 
the-a_destination address which specifies the gateway network element, a subnet 
broadcast address^ or a multicast address; and 

code that accepts packets received over the second IP based interface comprising 
a if th e destination address which specifies the gateway network element, a network 
element in the second network or a multicast address; 

code that drops all other packets received over the first or second IP based 
interface . 

Claim 19 (previously presented): The gateway network element of claim 1 
wherein one set of filtering rules filters packets received over the first IP based interface 
with a destination address of the gateway network element and another set of filtering 
rules filters packets received at the second IP based interface with a destination address 
of the gateway network element. 

Claim 20 (canceled). 

Claim 21 (previously presented): The gateway network element of claim 1 
further comprising code that tunnels connections between a client node and a DCC- 
connected network element. 

Claim 22 (canceled). 
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Claim 23 (previously presented): The gateway network element of claim 1 
wherein the first network comprises to a Wide Area Network (WAN) and the second 
network comprises a Local Area Network (LAN). 

Claim 24 (currently amended): The gateway network element of claim 7 further 
comprising means for forwarding filtered packets for analysis by the processor . 

Claim 25 (previously presented): The gateway network element of claim 7 
wherein one set of filtering rules filters packets received over the first IP based interface 
with a destination address of the gateway network element and another set of filtering 
rules filters packets received at the second IP based interface with a destination address 
of the gateway network element. 

Claim 26 (previously presented): The gateway network element of claim 7, 
further comprising means for implementing a proxy server that provides forwarding 
between IP addresses of the first and second networks. 

Claim 27 (previously presented): The gateway network element of claim 1 
wherein one of said categories comprises packets received from the first network and 
another of said categories comprises packets received from the second network. 

Claim 28 (currently amended): The gateway network element of claim 27 
wherein one of said categories comprises packets addressed to the gateway network 
element 
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